$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tzENEn7RDdvIM6RNg0DRS3avshU.roa File: tzENEn7RDdvIM6RNg0DRS3avshU.roa (raw, json) Hash identifier: U/PiS8188X12Us44PDZOW3Bc5GBA+ytNmtT/HhsRHbI= Subject key identifier: B7:31:0D:12:7E:D1:0D:DB:C8:33:A4:4D:83:40:D1:4B:76:AF:B2:15 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 27C3 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tzENEn7RDdvIM6RNg0DRS3avshU.roa Signing time: Fri 01 Sep 2023 10:04:31 +0000 ROA not before: Fri 01 Sep 2023 10:04:31 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.195.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10179 (0x27c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:04:31 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B7310D127ED10DDBC833A44D8340D14B76AFB215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:d5:5c:fa:a4:9d:45:6a:4d:42:fc:fd:75: e9:9c:7b:e0:98:a5:1f:52:cd:2f:a6:d1:6f:57:08: 89:35:6d:ab:01:fd:34:89:8e:5f:aa:ac:40:09:57: a3:02:17:a5:f7:17:aa:c3:80:34:a2:65:df:91:bf: 39:32:43:3c:c0:d3:f1:8b:a9:e7:bb:39:47:fb:49: f6:58:34:a1:bd:1e:aa:d2:51:40:95:9a:5a:d6:18: 64:64:7a:1a:13:b1:75:bc:02:e0:bd:3e:b9:38:30: e6:92:37:dd:be:66:7c:03:9e:06:a1:dd:db:b8:6f: 79:8f:4b:09:bf:1b:64:c9:cd:88:18:58:ed:3b:f9: ec:a4:10:45:0f:d6:c7:4e:82:2f:24:f8:0c:1f:0b: 24:82:31:d8:ab:8b:6c:e5:2d:00:d2:42:dd:69:c1: ff:5c:eb:b1:bf:6f:d7:9b:f2:f7:4d:79:0b:8e:08: 03:bf:00:4f:ba:b5:6d:b0:cc:c2:d8:4f:ae:53:8b: 30:5b:c2:05:35:76:60:24:36:7b:7f:8a:99:ab:5d: 97:9e:21:11:94:dd:c3:cb:56:9b:bb:cb:52:de:81: 9c:db:f9:d2:ef:98:65:46:47:77:50:bb:18:55:52: 67:80:16:2e:64:f6:2f:2a:e2:63:6d:50:b3:7f:21: 88:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:31:0D:12:7E:D1:0D:DB:C8:33:A4:4D:83:40:D1:4B:76:AF:B2:15 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tzENEn7RDdvIM6RNg0DRS3avshU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.195.128.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:96:c4:9a:67:de:eb:c7:c3:d2:f8:9f:4b:ae:e6:e7:e0:2e: fc:bb:85:c8:c2:a4:04:85:f4:fe:7c:aa:51:90:36:62:a4:ec: 76:fe:66:10:94:6f:33:5d:b9:79:16:68:e4:73:e4:83:a9:2f: 33:f4:7a:6c:e2:e2:3f:b8:03:e3:ba:41:78:93:00:80:7e:3d: d2:b4:96:ed:34:da:c7:5c:6f:12:28:ac:da:8f:78:a9:9c:2f: bd:48:5d:07:87:cf:8c:de:82:3a:ba:ab:00:a7:e9:22:dd:a5: fe:44:bf:3e:67:b7:a8:87:d3:df:4e:4b:f7:95:78:69:ce:2d: 1c:c7:45:15:7e:89:1f:dd:5b:bd:f8:46:57:76:91:70:1d:f4: 09:1a:bf:35:ac:d1:6e:d5:c9:b2:b3:02:05:d5:9f:0d:db:8e: 6d:bc:a4:2a:0d:2d:ab:a1:22:28:54:24:4c:d3:c7:6c:3a:a5: 85:a1:3e:ba:6d:44:c0:a9:69:b3:4f:f7:87:75:28:95:92:cb: 35:18:9b:73:73:65:09:c2:ed:ba:11:3c:b8:47:14:64:fd:84: 13:79:76:9f:71:29:00:4e:b9:2d:13:c8:96:05:5c:c5:78:76: dc:64:ac:88:d7:b8:b2:56:07:3b:44:41:5f:de:9a:ef:33:95: aa:72:3b:7f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJ8MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA0MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI3MzEwRDEyN0VEMTBE REJDODMzQTQ0RDgzNDBEMTRCNzZBRkIyMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxo9Vc+qSdRWpNQvz9demce+CYpR9SzS+m0W9XCIk1basB/TSJ jl+qrEAJV6MCF6X3F6rDgDSiZd+RvzkyQzzA0/GLqee7OUf7SfZYNKG9HqrSUUCV mlrWGGRkehoTsXW8AuC9Prk4MOaSN92+ZnwDngah3du4b3mPSwm/G2TJzYgYWO07 +eykEEUP1sdOgi8k+AwfCySCMdiri2zlLQDSQt1pwf9c67G/b9eb8vdNeQuOCAO/ AE+6tW2wzMLYT65TizBbwgU1dmAkNnt/ipmrXZeeIRGU3cPLVpu7y1LegZzb+dLv mGVGR3dQuxhVUmeAFi5k9i8q4mNtULN/IYirAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtzENEn7RDdvIM6RNg0DRS3avshUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3R6RU5FbjdSRGR2SU02Uk5n MERSUzNhdnNoVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7 w4AwDQYJKoZIhvcNAQELBQADggEBAE6WxJpn3uvHw9L4n0uu5ufgLvy7hcjCpASF 9P58qlGQNmKk7Hb+ZhCUbzNduXkWaORz5IOpLzP0emzi4j+4A+O6QXiTAIB+PdK0 lu002sdcbxIorNqPeKmcL71IXQeHz4zegjq6qwCn6SLdpf5Evz5nt6iH099OS/eV eGnOLRzHRRV+iR/dW734Rld2kXAd9AkavzWs0W7VybKzAgXVnw3bjm28pCoNLauh IihUJEzTx2w6pYWhPrptRMCpabNP94d1KJWSyzUYm3NzZQnC7boRPLhHFGT9hBN5 dp9xKQBOuS0TyJYFXMV4dtxkrIjXuLJWBztEQV/emu8zlapyO38= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:32 2024 by rpki-client on console-fra.rpki-client.org